CVE ID :CVE-2026-93748
Published : Sept. 18, 2026, 5:51 p.m. | 37 minutes ago
Description :http-cache-semantics through 4.2.0 fails to properly validate security-zeroed cache entries when processing client max-stale directives, allowing unauthenticated attackers to retrieve cached responses belonging to other users. Attackers can request the same URL with a large max-stale value to obtain another user’s Set-Cookie session credentials from shared-cache entries that were deliberately zeroed for security reasons.
Severity: 8.7 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more… To Read More Visit Read More